mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
18 lines
1002 B
Plaintext
18 lines
1002 B
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * security/zero_trust_workload_identity_manageer/zero-trust-manager-overview.adoc
|
|
|
|
:_mod-docs-content-type: CONCEPT
|
|
[id="zero-trust-manager-about-spiffe_{context}"]
|
|
= SPIFFE
|
|
|
|
|
|
{spiffe-full} provides a standardized way to establish trust between software workloads in distributed systems. SPIFFE assigns unique IDs called SPIFFE IDs. These IDs are Uniform Resource Identifiers (URI) that include a trust domain and a workload identifier.
|
|
|
|
The SPIFFE IDs are contained in the {svid-full}. SVIDs are used by workloads to verify their identity to other workloads so that the workloads can communicate with each other. The two main SVID formats are:
|
|
|
|
* X.509-SVIDs: X.509 certificates where the SPIFFE ID is embedded in the Subject Alternative Name (SAN) field.
|
|
* JWT-SVIDs: JSON Web Tokens (JWTs) where the SPIFFE ID is included as the `sub` claim.
|
|
|
|
For more information, see link:https://spiffe.io/docs/latest/spiffe-about/overview/[SPIFFE Overview].
|